PT-2010-2437 · Digium · Asterisk Business Edition+1

Published 2010-02-23 · Updated 2018-10-10 · CVE-2010-0685

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.2.x through 1.6.x Asterisk Business Edition versions B.x.x through C.x.x

Description The dialplan functionality in Asterisk allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the ${EXTEN} channel variable is expanded. This can be demonstrated using the Dial application to process a crafted SIP INVITE message, potentially adding an unintended outgoing channel leg.

Recommendations For Asterisk Open Source versions 1.2.x through 1.6.x, consider implementing filtering functionality to prevent metacharacter injection when using the ${EXTEN} channel variable. For Asterisk Business Edition versions B.x.x through C.x.x, consider implementing filtering functionality to prevent metacharacter injection when using the ${EXTEN} channel variable. As a temporary workaround, consider restricting the use of the Dial application with crafted SIP INVITE messages until a more comprehensive solution is available.

Exploit

Fix

Related Identifiers

CVE-2010-0685

Affected Products

Asterisk Business Edition

Asterisk Open Source

References · 14

• 🔥 http://downloads.digium.com/pub/security/AST-2010-002.html · Exploit
• https://security-tracker.debian.org/tracker/CVE-2010-0685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0685 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0685 · Vendor Advisory
• http://vupen.com/english/advisories/2010/0439 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-0685 · Vendor Advisory
• http://secunia.com/advisories/38641 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037679.html · Vendor Advisory
• http://securityfocus.com/archive/1/509608/100/0/threaded · Note
• http://secunia.com/advisories/39096 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56397 · Note
• http://securitytracker.com/id?1023637 · Note
• http://svn.asterisk.org/svn/asterisk/branches/1.2/README-SERIOUSLY.bestpractices.txt · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0685 · Note